Dashboard / CVE-2012-5571

CVE-2012-5571

MEDIUM
MEDIUM Priority: 0.11 BB Relevance: 61/100
Published: 2012-12-18 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: Low
I: Low
A: None

Description

A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role has been removed from a tenant. An attacker can leverage a token associated with a removed user role to gain unauthorized access.

Weakness Classification (2)

Affected Software (2)

VendorProductVersion
openstack essex 2012.1
openstack folsom 2012.2

References & Advisories (17)

https://access.redhat.com/errata/RHSA-2012:1556
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2012:1557
vendor-advisory x_refsource_REDHAT

Bug Bounty Relevance

61 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

5.4 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS — Exploitation Probability

2.05%
Raw Score 0.020550
Percentile 81.3%
Date 2026-10-31

EPSS Trend

2026-10-31
0.02055
2026-10-30
0.02055

Intelligence Sources

mitre ref →
nvd ref →

External Links